Overview

overview

8

Static

static

3

setup/7zxa.dll

windows7-x64

1

setup/7zxa.dll

windows10-2004-x64

1

setup/Default.exe

windows7-x64

1

setup/Default.exe

windows10-2004-x64

1

setup/Default32.exe

windows7-x64

3

setup/Default32.exe

windows10-2004-x64

3

setup/RUXI...es.dll

windows10-2004-x64

1

setup/Setu...ms.dll

windows10-2004-x64

1

setup/Setu...pi.dll

windows10-2004-x64

1

setup/Setu...pi.dll

windows10-2004-x64

1

setup/setup.exe

windows7-x64

1

setup/setup.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    101s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    25/07/2024, 16:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    setup/Default.exe

  • Size

    437KB

  • MD5

    ab1c239d68d65d84ee139dd0c8ce8a52

  • SHA1

    1a638556de77369151839bf7a570d972410360e3

  • SHA256

    b83a105dda4806f7ac5e9f3b6546829b37d42d85911d1c4487b1e95bfea91e9d

  • SHA512

    ea2306628f2079bdf5420c12af3d097c78fb3d3cd90ae2283c6f591e0751325f3af675bb257b812babb4d03f7493e2819b97fca969dc9b5031ec07bb8517ecfb

  • SSDEEP

    12288:xyveQB/fTHIGaPkKEYzURNAwbAgB2X+t4:xuDXTIGaPhEYzUzA0/0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\setup\Default.exe
    "C:\Users\Admin\AppData\Local\Temp\setup\Default.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:1140

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads